removed version information from ipsec.conf
[strongswan.git] / testing / hosts / sun / etc / ipsec.conf
1 # /etc/ipsec.conf - strongSwan IPsec configuration file
2
3 config setup
4         plutodebug=control
5         crlcheckinterval=180
6         strictcrlpolicy=no
7         nat_traversal=yes
8         charonstart=no
9
10 conn %default
11         ikelifetime=60m
12         keylife=20m
13         rekeymargin=3m
14         keyingtries=1
15         left=PH_IP_SUN
16         leftcert=sunCert.pem
17         leftid=@sun.strongswan.org
18         leftfirewall=yes
19
20 conn net-net
21         leftsubnet=10.2.0.0/16
22         right=PH_IP_MOON
23         rightsubnet=10.1.0.0/16
24         rightid=@moon.strongswan.org
25         auto=add
26
27 conn host-host
28         right=PH_IP_MOON
29         rightid=@moon.strongswan.org
30         auto=add
31
32 conn nat-t
33         leftsubnet=10.2.0.0/16
34         right=%any
35         rightsubnetwithin=10.1.0.0/16
36         auto=add